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Abstract 

In this work, we consider the rational points on elliptic curves over 
finite fields F p . We give results concerning the number of points on the 
elliptic curve y 2 = x 3 + a? (mod p) where p is a prime congruent to 1 
modulo 6. Also some results are given on the sum of abscissae of these 
points. We give the number of solutions to y' 2 = x 3 + a 3 (mod p), also 
given in ([T], p. 174), this time by means of the quadratic residue character, 
in a different way, by using the cubic residue character. Using the Weil 
conjecture, one can generalize the results concerning the number of points 
in F p to F p ,'. 

1 Introduction 

Let F be a field of characteristic not equal to 2 or 3. An elliptic curve E 
defined over F is given by an equation 

y 2 = x 3 + Ax + Be ¥[x] (1) 

where A.BeFso that 4A 3 + 27B 2 ^ in F. The set of all solutions (x, y) € 

F x F to this equation together with a point o, called the point at infinity, is 
denoted by E(¥) , and called the set of F-rational points on E. The value A(E) = 
— 16(4A 3 + 27£? 2 )is called the discriminant of the elliptic curve E. For a more 
detailed information about elliptic curves in general, see [3]. 

The E(¥) forms an additive abelian group having identity o. Here by defini- 
tion, — P = (x, —y) for a point P = (x, y) on E. 

It has always been interesting to look for the number of points over a given 
field F. In 0, three algorithms to find the number of points on an elliptic curve 
over a finite field are given. 
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2 The Group E(F p ) of Points Modulo p, p = 1 (mod 6) 

It is interesting to solve polynomial congruences modulo p. Clearly, it is much 
easier to find solutions in ¥ p for small p, than to find them in (Q>. Because, in 
F p , there is always a finite number of solutions. 

Let a G F p and let p be as stated earlier, then the number of solutions to a; 3 = 
a is given by 1 + x 3 (a) + x§(a) for a cubic character x 3 (so \3 ■ F* — > {1, w, w 2 } 
where w is a non-trivial cubic root of unity). Likewise, let x( a ) — ( p ) denote 
the Legendre symbol which is equal to +1 if a is a quadratic residue modulo p; 
— 1 if not; and if p\a, ([3], p. 132). The number of solutions to x 2 — a is then 
1 + X(a). 

In this work, we consider the elliptic curve (1) in modulo p, for A — and 
£? = a 3 , and denote it by E^. We try to obtain results concerning the number 
of points on E a over F p , and also their orders. 

Let us denote the set of F p -rational points on E a by E a (¥ p ), and let N Pta be 
the cardinality of the set E a (F p ). It is known that the number of solutions of 
y 2 = u (mod p) is 1 + \(u), and so the number of solutions to y 2 = x 3 + a 3 (mod 
p), counting the point at infinity, is 

N P,a = 1 + ^ (1 + x(x 3 + a 3 )) 

x£¥ p 

= p+l+J2x(x 3 +a 3 ). 

zeFp 

It can easily be seen that an elliptic curve 

y 2 = x 3 + a 3 (2) 

can have at most 2p + 1 points in Z p ; i.e. the point at infinity along with 2p 
pairs (x, y) with x, y € F p , satisfying the equation (2). This is because, for each 
x € Fp, there are at most two possible values of y £ ¥ p , satisfying (2). 

But not all elements of F p have a square root. In fact, only half of the 
elements in F^ = F p \{0} have square roots. Therefore the expected number of 
points on E(W P ) is about p+1. 

It is known, as a more precise formula, that the number of solutions to (2) 

is 

i?+l + ^x(z 3 + a 3 )- 
The following theorem of Hasse quantifies this result: 

Theorem 1 (Hasse, 1922) An elliptic curve (2) has 

p+l + 5 

solutions (x,y) modulo p, where \5\ < 2^/p. 

Equivalently, the number of solutions is bounded above by the number (y/p + 

I) 2 - 
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From now on, we will only consider the case where p is a prime congruent 
to 1 modulo 6. We begin by some calculations regarding the number of points 
on (2). First we have 

Theorem 2 Letp = 1 (mod 6) be a prime. The number of points (x,y) on the 
curve y 2 = x 3 + a 3 modulo p is given by 



4+ 



zeF p 



where 

p(x) = 

Also the sum of such y is p. 



2 if \(x 3 + a 3 ) = 1 
if X (x 3 + a 3 ) ± 1 



Proof. For x = 0, 1, 2, ...,p— 1 (mod p), find the values y 2 — x 3 + a 3 (mod p). 
Let Q p denote the set of quadratic residues modulo p. When y 2 e Q p , then 
there are two values of y € U p , the set of units in F p ; which are xq and p — xq. 
When y = 0, there are three more points which are x — a, x — wa and x = w 2 a 
where w 2 + w + 1 = 0. (Here w £¥ p since p = 1 (mod 6)). Finally considering 
the point at infinity, the result follows. ■ 

We now consider the points on (2) lying on the y-axis. 



Theorem 3 Let p = 1 (mod 6) be prime. For x = (mod p), there are two 
points on the curve y 2 = x 3 + a 3 (mod p), when a <E Q p , while when a ^ Q p , 
there is no point with x = (mod p) . 

Proof. For x = 0(modp), we have y 2 = a 3 (mod p). First consider y 2 = 
a 3 (mod p). This congruence has a solution if and only if ^^-^ = {^j — 1; i.e. 
if and only if a is a quadratic residue modulo p. ■ 

Let us now denote by K p ,the set of cubic residues modulo p. We can now 
restate the result given just before Hasse's theorem in terms of cubic residues 
modulo p, instead of quadratic residues. 

Theorem 4 Let p=l (mod 6) be prime. Let t = y 2 — a 3 . Then the number of 
points on the curve y 2 = x 3 + a 3 (mod p) is given by the sum 



where 



if ti K p , 
f(t) = { 1 if p\t, 

3 iftex;, 



and the sum is taken over all y € F p . 
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Proof. Let p\t. Then the equation x 3 = t (mod p) becomes x 3 = (mod p). 
Then the unique solution is x = (mod p). Therefore f{t) = 1. 

Let secondly t £ K p . Then t is not a cubic residue and the congruence 
x 3 = t (mod p) has no solutions. If t € K*, then x 3 = t (mod p) has three 
solutions since p = 1 (mod 6) and (p — 1, 3) = 3. ■ 

We can also give a result about the sum of abscissae of the rational points 
on the curve: 

Theorem 5 Let p = 1 (mod 6) be prime. The sum of abscissae of the rational 
points on the curve y 2 = x 3 + a 3 (mod p) is 

J2(l + X P (x 3 + a 3 )).x. 
xeF p 

Proof. Since 

!+l if x 2 = t (mod p) has a solution, 
if p\t, 

— 1 if x 2 = t (mod p) has no solutions, 

we know that 1+X„(t) = 0, 1 or 2. When y = (mod p), x 3 +a 3 = (mod p) and 
hence asp|0, X P ( X + « 3 ) = 0. For each such point (x, 0) on the curve, (1 + 0). a; = 
x is added to the sum. 

Let x 3 + a 3 = t. If (^) = +1, then for each such point (x, y) on the curve, the 
point (x, — y)is also on the curve. Therefore for each such t, (1 + l).x = 2xis 
added to the sum. 

Finally if (^) = —1, then the congruence x 2 = t (mod p) has no solutions, 
and such points (x, y) contribute to the sum as much as (1 + (— l)).a; = 0. ■ 

As we can see from the following result, the above sum is always congruent 
to modulo p: 

Theorem 6 Let p = 1 (mod 6) be prime. Then the sum of the integer solutions 
of x 3 = t (mod p) is congruent to modulo p. 

Proof. The solutions of the congruence x 3 = 1 (mod p) are x = 1, w and 
w 2 (mod p) , where w = ~ 1 + v/ ^ t is the cubic root of unity. In general, the so- 
lutions of x 3 = t(modp) are x = x , x wand x u> 2 (mod p), where x is a 
solution. This is because (x w) 3 = x^w 3 = x\ = t (mod p) and similarly 
(low 2 ) 3 = XqW 6 = Xq(w 3 ) 2 = Xq = t (modp). Therefore the sum of these 
solutions is 

xo + xqw + xqw 2 = xq + xqw + xq(— 1 — w) = 

If there is no solution, the sum can be thought of as 0. ■ 
We can now prove the following: 
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Theorem 7 Let p = 1 (mod 6) be prime. Let < x < p — 1 an integer. 
Then for any 1 < a < p — 1, the sum (which is an integer) 

p-i 

j(p) = J2( 1 +x(x 3 + a 3 ))x 

x=0 

is divisible by p. Ln particular 

p-i 

*(p) = J2^ 3 + a3 ) x 

is divisible by p. 

Proof. For every value of y, let y 2 — a 3 = t . Then the sum of the solutions of 
the congruence x 3 = t (mod p) is congruent to by Theorem 6. 

For all values of y, this is valid and hence the sum of all these abscissae is 
congruent to 0. ■ 

The hypothesis p = 1 (mod 6) is essential in this Theorem 7, as the following 
counterexample shows: take a = 1, p = 11. Then the first sum is easily seen 
to be 56 and the second is easily seen to be 1 and clearly neither of them is 
divisible by 11. 

We now look at the points on the curve having the same ordinate: 

Theorem 8 Let p = 1 (mod 6) be prime. The sum of the abscissae of the 
points (x, y) on the curve y 2 = x 3 + a 3 (mod p) having the same ordinate y, is 
congruent to zero modulo p. 

Proof. Let y be given. Then the congruence 

a; 3 = y 2 — a 3 (mod p) 

becomes 

x 3 = t (mod p) 

after a substitution t = y 2 — a 3 . The result then follows by Theorem 6. 

Finally we consider the total number of points on a family of curves y 2 = 
x 3 + a 3 (mod p), for a = 0, 1, p — 1 (mod p) and p = 1 (mod 6) is prime. 
We find that when (a,p) = 1, there are p + 1 — 2k or p + 1 + 2k points on a 
curve y 2 = x + a 3 (mod p), for a suitable integer k. ■ 

Theorem 9 Let p = 1 (mod 6) be prime and let 1 < a < p — 1. Let N p ^ a — 
#E(W P ). Then 

p-i 

a=l 
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Then 



Proof. Since 1 < a < p — 1, we have (a,p) — 1. Then the set of elements a 3 x 3 
modulo p is the same as the set of a; 3 modulo p. Then 

$>(* 3 + a 3 ) = ^(aV+a 3 ) 

x£¥ p x£¥ p 

= x(« 3 )-E^ 3 + 1 ) • 

xG¥ p 

By the discussion at the beginning of section 2, we get 

N p , a -p-l = X (a 3 ).(N pA -p-l) . 

Then by taking sum at both sides, we obtain 
p— l p— l 

D^. - P - 1) = £x(a 3 ).(AW - P - 1) ■ 

a— 1 a— 1 

p—1 p—1 p—1 

E^«-E(f +1 ) = (^,i-p-i)-Ex(« 3 ) 

a— 1 a— 1 a— 1 

p-1 

= (N pA -p-l).J2x(a) 

a=l 

using x(a 3 ) = \{a) as both sides are 1 or —1 . Finally as there are as many 
residues as non residues, we know that 

p-i 

E*( fl ) = 

a=l 

and by means of it, we conclude 

p-i 

o=l 

as required. ■ 

Conclusion 10 All the results concerning the number of points on ¥ p obtained 
here for prime p = 1 (mod 6) can be generalized to ¥ pr , for a natural number 
r > 1, using the following result: 

Theorem 11 (Weil Conjecture) The Zeta-function is a rational function of T 
having the form 

7(T- FW ) l-*T + qT 2 

where only the integer a depends on the particular elliptic curve E. The value 
a is related to N = Ni as follows: 

N = q+ 1 - a. 
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In addition, the discriminant of the quadratic polynomial in the numerator 
is negative, and so the quadratic has two conjugate roots — and ^ with absolute 
value -^j. Writing the numerator in the form (1 — aT)(l — (3T) and taking the 
derivatives of logarithms of both sides, one can obtain the number of F g r- points 
on E, denoted by N r , as follows: 

N r = q r + 1 - a r - /3 r , r = l, 2, ... 

Example 12 Let us find the F7-points on the elliptic curve y 2 = x 3 +4 3 . There 
are Ni = 12 ^-points on the elliptic curve: 

(0,1), (0,6), (1,3), (1,4), (2,3), (2,4), (3,0), (4,3), (4,4), (5,0), (6,0) and o. 
Now as r = 2, we have a = —4. Then from the quadratic equation 

1 + AT + IT 2 = 0, 

a = -2 - V3i and /3 = -2 + V3i and finally N 2 = 48. Similarly N 3 = 324 can 
be calculated. 
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